PT-2025-39312

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw in Cisco IOS XE Software may allow an attacker with level-15 privileges or physical access to a device to execute persistent code during boot and compromise the system’s...

The vulnerability of the Adobe Substance 3D Viewer application, which allows for the viewing and editing of 3D files, stems from a write-off outside the buffer boundary. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted malicious file...

The vulnerability of the Adobe Substance 3D Modeler software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe Substance 3D Modeler software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability in the component /libsrc/dcrleccd.cc of the DICOM processing library allows a attacker to cause a service failure.

The vulnerability in the /libsrc/dcrleccd.cc component of the DICOM processing library is related to the use of the NULL pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures by using the created DICOM file...

CVE-2025-51006

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dltlinuxsll2cleanup function in plugins/dltlinuxsll2/linuxsll2.c. This vulnerability is triggered when tcpeditdltcleanup indirectly invokes the cleanup routine multiple times on the same memory region. By...

CVE-2025-9449

A Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file...

CVE-2025-7988

CVE-2025-7988 affects Ashlar-Vellum Graphite, specifically the VC6 file parser. The vulnerability is a parsing error causing a buffer overrun (out-of-bounds write) in VC6 file processing, leading to remote code execution . Exploitation requires user interaction (visiting a malicious page or openi...

CVE-2025-9450 Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

A Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted JT file...

CVE-2025-9450 Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

A Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted JT file...

PT-2025-38118

Name of the Vulnerable Software and Affected Versions SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description An out-of-bounds read issue exists in the PAR file reading procedure of SOLIDWORKS eDrawings. Successful exploitation of this issue could allow an attacker to execute...

PT-2025-38120

Name of the Vulnerable Software and Affected Versions SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description A use of uninitialized variable issue exists in the JT file reading procedure within SOLIDWORKS eDrawings. This could allow an attacker to execute arbitrary code by...

CVE-2025-54262

Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-54262

Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-54262 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-54262 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-54262

CVE-2025-54262 affects Adobe Substance 3D Stager (versions 3.1.3 and earlier). The vulnerability is an out-of-bounds read triggered while parsing a crafted file, which could allow an attacker to execute code in the context of the current user. Exploitation requires user interaction (victim opens ...

CVE-2025-54262: Out-of-bounds Read

Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-10203

Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vulnerability affects Digilent WaveForms 3.24.3 and...

PT-2025-37723

Name of the Vulnerable Software and Affected Versions: Digilent WaveForms versions prior to 3.24.4 Description: A relative path traversal vulnerability exists due to improper input validation in Digilent WaveForms, potentially leading to arbitrary code execution. Successful exploitation requires ...

CVE-2025-54243

Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...